On Tue, 27 Nov 2018 12:51:40 +0200 Brent Clark wrote: > Good day Guys > > I have the following spam email, and I picked up that the plugin > 'Mail::SpamAssassin::Plugin::RelayCountry', is not picking up Korea. > > https://pastebin.com/i45KsgVk
Try running it through spamassassin -D metadata 1>/dev/null and look for debug about what database type is being used. I've found that the plugin will fallback to the 'fast' version if anything is wrong and it only shows up in detailed debug. > > header RELAYCOUNTRY_BAD X-Relay-Countries > =~ /^(CN|RU|SU|IN|BR|UA|KR)/ describe RELAYCOUNTRY_BAD Relayed > through foreign countries score RELAYCOUNTRY_BAD 1.0 > add_header all Relay-Country _RELAYCOUNTRY_ > > In my testing, I added ZA, and it picked up for IP 196.35.198.137. > > Also, does anyone know why the 27.102.212.207 is in square brackets. Usually it's to indicate that it's an IP address.